Token/Access don't refresh

[Anonymous]

I have the problem that the connection/token (custom Connetor) don't refresh.
If I used the connector after the token expires, I get 401.
The answer I get .
"WWW-Authenticate": "Bearer error="invalid_token", error_description="The token expired at '12/04/2020 13:09:37'"",

My settings at Custom Connector look like in the picture.
The token that I get the first time works fine.

[abm]

Hi @Anonymous 

Please have a look at these posts.

Solved: Generic Oauth 2 connector not refreshing access or... - Power Platform Community (microsoft.com)

Solved: Access token expired, but it isn't (glitch?) - Power Platform Community (microsoft.com)

Thanks

[Anonymous · Accepted solution]

You had to wait for Azure to get the refresh Token.

[JacksonOng]

This is not the solution....  the refresh URL is always blank.

[HEATFreight]

Yeah, I have the same problem as @JacksonOng, the refresh URL is blank.

If I update a custom connector from Postman v2.1 collection, after I fill out the security section and then move on to the definition section to fix the {{parameter}} vs. {parameter} discrepancy in the Swagger Editor, I click "Update connector" and I get errors because the security section blanks out the values I had just typed. The client ID, client secret, and refresh URL get wiped. I fix those three fields and click "Update connector" once again. This time it saves with no errors, but the refresh URL that I had just fixed now says "Refresh URL" instead of the actual URL. In my case the refresh URL and token URL are exactly the same. Maybe that's part of the issue, like maybe them being the same URL causes an error?

In any case, I can't get it to refresh the token!

Any ideas how to fix?

See similar thread here and here

Edit: oh I think I found part of the answer here

Edit2: Ok, yep I've figured it out! I exported a Postman v2.1 collection with all requests using the OAuth2 authorization method. Crucially, I left out the manual refresh token request from the collection. Postman requires you to build a manual request to keep the token refreshed because it will not do that for you even though it has that convenient "Get New Access Token" button: 

You must leave out any manual authorization or refresh requests that you might use in Postman. These are not necessary (nor will they even work) in the custom connector. So you export a v2.1 Postman collection of just the non-authentication-related requests that you want to include in your connector. Each of these needs to have a type of "OAuth 2.0" in the Authorization tab. I followed this guide.

You import the Postman collection into the Power Automate custom connector and proceed through the >General and >Security settings. Crucially, you must save the >Security settings before moving on. I never see this mentioned in tutorials, but if you don't do it, the client ID and secret as well as the Refresh URL will not be saved and you'll have to return to finish the >Security tab before you can actually "Update connector".

The interesting thing here is that no matter what you do, the Refresh URl field will wipe itself as if it did not accept your input, but rest assured this is the expected behavior.

Next tab is >Definition. The thing to remember about >Definition is that the conversion between the Swagger Editor and the Custom Connector user interface is broken. YOU CAN NOT TRUST IT TO CONVERT THE SWAGGER CODE PROPERLY! So here is what you do, follow the guide I linked above to edit the code in the Swagger Editor, and then click "Update connector" WHILE YOU STILL HAVE SWAGGER EDITOR TOGGLED ON! I never see any guides mention this part. If you switch back to the regular interface by toggling off the Swagger Editor, there is a chance something will break. You should be safe if you don't open any of the request parameters (like Path, Query, Headers, Body or any of their sub-fields), and clicking "Update connector" toggles off the Swagger Editor anyway, but definitely if you start opening any of those request parameter fields it will start breaking your Swagger code! I do think you can toggle off Swagger Editor before clicking "Update connector" and it will still work. It's mainly just opening the request parameters that begins to break the Swagger code.

One example is if you try using integers as default values for string types. The normal Custom Connector interface will error out if you give a string parameter an integer for a default value (say if your API requires a company ID # parameter). If you get this "integer as string" error, you can simply open the Swagger Editor and put single quotes around the affected default value integers. If you click "Update connector" while Swagger Editor is still toggled on, or at least without navigating back to the string parameter in question, the single quotes will remain intact and your default value will populate in the >Test tab and wherever you use the connector, like Power Automate. But the second you open the string parameter in the normal Custom Connector interface (i.e. Swagger Editor toggled off), **BAM** no more single quotes. After opening the string parameter which has an integer default value, toggle Swagger Editor back on again and you will see that the single quotes have disappeared from around the default value integer.

Off the top of my head, I'm not sure what other parts of the Swagger code breaks when you try editing the Custom Connector parmeters outside of the Swagger Editor, but suffice it to say something ain't right. Stick to the Swagger Editor and you should be fine.

I'm at T+1 day of QuickBooks Online API Custom Connector keeping itself refreshed. The OAuth2 authorization code flow and refresh tokens work great in Custom Connectors if you do it right.